Security Ninja PRO v5.307 Plugin
Security Ninja PRO is a comprehensive WordPress security plugin built on years of industry best practices to help protect your website from vulnerabilities and attacks. It performs over 40 security tests, including checks for brute-force exposure and known weaknesses such as the Timthumb vulnerability. The plugin scans your site for potential security holes and provides preventive measures to reduce risk. With detailed explanations and included code snippets for quick fixes, it makes strengthening your site’s security straightforward and practical.
Security Ninja PRO works through dedicated modules that continuously monitor and analyze your WordPress installation. The Core Scanner compares your core files with official master copies from WordPress.org to detect unauthorized changes, while the Malware Scanner checks themes and plugins for malicious code. An Events Logger records site activity, including failed login attempts, and the Scheduled Scanner runs automated tests without manual intervention. Together, these tools provide ongoing monitoring and proactive protection for your website.
Core Features of Security Ninja PRO Plugin
- 40+ Security Tests: Performs over 40 tests including brute-force attack checks.
- Vulnerability Detection: Scans your site for security weaknesses and holes.
- Timthumb Vulnerability Check: Detects exposure to the Timthumb vulnerability.
- Preventive Security Measures: Provides tools to help prevent attacks.
- Quick Fix Code Snippets: Includes ready-to-use code snippets for fast security improvements.
- Core Scanner Module: Compares WordPress core files with official master copies.
- Malware Scanner Module: Scans theme and plugin files for malicious code.
- Events Logger Module: Logs site events including failed login attempts.
- Scheduled Scanner Module: Runs automated security tests on a schedule.
What’s New (Changelog) in Security Ninja PRO v5.307
= 5.307 =
* 2026-10-25
* Login, firewall, and scan updates. Your saved settings stay as they are.
* FIX: Core Scanner - WordPress 7 files under wp-includes/php-ai-client/ that were saved with a shortened name are no longer listed as critical unknown files. When the file matches the official checksum, the scan explains the shortened name and can rename it back. Those files are left out of "Delete critical & warning unknowns".
* FIX: Firewall - A saved coupon limit of 3 (the minimum is now 5) no longer blocks saving the other firewall tabs. The field sits on the Store tab in the same form, and the browser was refusing to submit it. Thank you Chris.
* IMPROVED: Two-Factor Authentication - Repeated wrong codes now use the same limit as failed logins (default 5 tries in 5 minutes). The wait stays in place until that window ends. With the firewall on, those tries count the same way a wrong password does.
* IMPROVED: Events Logger - An incorrect 2FA code is saved in the events log with the account name. With the firewall on, the same try is also listed as a failed login.
* IMPROVED: Two-Factor Authentication - Authenticator app secrets now follow your WordPress salts. The update re-encrypts existing secrets the next time you open wp-admin. Email codes are unchanged. If you later change AUTH_KEY or SECURE_AUTH_KEY, those users set up the app again.
* FIX: Early Firewall - Block events waiting to be logged are stored as data files. An event that had not been written to the log yet may be missing once after this update.
* FIX: Login Protection - The hidden wp-admin check now confirms the login cookie is valid. A normal login is unchanged.
* FIX: Core Scanner - "Delete critical and warning unknowns" leaves files in the site root alone, including wp-config.php. You can still remove one of those files from its own row.
* IMPROVED: Core Scanner ignores HTML challenge pages when it downloads official file content for a diff or restore.
* IMPROVED: Firewall IP Management shows Unblock for temporary local bans and 404 Guard bans.
* IMPROVED: Visitor Log stays on the current page after you ban an IP from the log.
* IMPROVED: MainWP - The child connection is available whenever MainWP Child is active on the site.
Similar Plugins
